AlgoSize

Algosize is a cybersecurity company that identifies and solves security challenges through an ethical hacker community. #ai #blockchain #software

[0xor0ne @0xor0ne]

Finding and exploiting two vulnerabilities in AMD's UEFI firmware (Steam Deck)

https://t.co/0pmcw1C3id

#infosec #amd

[Chaofan Shou @Fried_rice]

1inch market maker @trustedvolumes got hacked for over $4.5M and a few smaller MMs got hacked for $0.5M yesterday.

The root cause is that 1inch calls MM contract’s resolveOrders function to get funds to its settlement contract. Most bots only checked the msg.sender = settlement contract - and unfortunately there was an arbitrary call vulnerability in settlement contract. Thus the hacker could forge resolveOrders call and drain MM contracts.

The funny thing is the hacker incorrectly transferred half of the stolen funds to the 1inch settlement contract, making the funds available for everyone to grab, and he spent quite sometime to get funds back. We were trying to compete but the hacker got it first unfortunately.

[CISA Cyber @CISACyber]

🚨 Urgent Alert: Criminals posing as "BianLian Group" are sending extortion letters to corporate execs, threatening to leak sensitive info unless paid. Report incidents to CISA at [email protected]. Review our alert for more 👉 https://t.co/RfiPZqff48 #Cybersecurity

[Michael Koczwara @MichalKoczwara]

🇰🇵Lazarus infrastructure linked to the recent SafeWallet/Bybit breach.

🕵️Key Observations:

Shared JARM fingerprint
Identical HTTP headers
Common domain registration via Namecheap
Same certificate provider (Sectigo)

70.34.245[.]118
getstockprice[.]com
131.226.2[.]120
getstockprice[.]info
5.206.227[.]51
clubinfo[.]io

[Code Geek @codek_tv]

Linux File System

[Vladimir S. | Officer's Notes @officer_secret]

⚠️ Alert: New Telegram Malware on Android! ⚠️

This sneaky malware masquerades as a regular video, targeting your data. If opening a video redirects you to a browser asking for an app update or "necessary" player installation, do NOT proceed!

[OccupytheWeb @three_cube]

Wireshark is one of the most important tools in cybersecurity!

Master it now!

[Tavis Ormandy @taviso]

You can now jailbreak your AMD CPU! 🔥We've just released a full microcode toolchain, with source code and tutorials. https://t.co/4NYerRuFo1

[GreyNoise @GreyNoiseIO]

🚨 GreyNoise has detected active exploitation of Silk Typhoon-linked CVEs in the past 24 hours. 90 threat IPs actively targeting. Full analysis: https://t.co/3q2zn497wN #GreyNoise #Cybersecurity #SilkTyphoon

[The Hacker News @TheHackersNews]

🐱‍💻 North Korean hackers, TraderTraitor, pulled off a $1.5 billion 💰 crypto heist targeting Safe{Wallet} and Bybit.

They bypassed MFA, hijacked AWS tokens, and used tools like Kali Linux for stealth access.

Social engineering also tricked developers into running a malicious Docker project to fuel the breach.

Learn more: https://t.co/NhexstIVnq

[Hacking Articles @hackinarticles]

Kali Linux Tools

#infosec #cybersecurity #cybersecuritytips #microsoft #redteam #informationsecurity #CyberSec #networking #offensivesecurity #infosecurity #cyberattacks #security #oscp #cybersecurityawareness #bugbounty #bugbountytips

[arndxt @arndxt_xo]

Bybit’s $1.5B hack is bullish - Lazarus has diamond hands.

Led by Park Jin Hyok, now wanted by the FBI.

They’ve just drained $1.46B in staked ETH & ERC-20 tokens from Bybit, making it the biggest crypto hack ever, twice the size of the second-largest breach.

How did they pull it off? Let’s break it down. 🧵👇

[Bybit @Bybit_Official]

A coordinated effort led to the freezing of $42.89M in just one day. Thanks to the following teams for their swift action:

@tether: Flagged address and froze 181K USDT
@THORChain: Blocked the blacklist
@ChangeNOW_io: Froze 34 ETH
@FixedFloat: Froze 120K USDC + USDT
@avax: Froze 0.38755 BTC
@coinexcom: Blocked the blacklist and provided key insights
@bitgetglobal: Blocked the blacklist and froze 84 USDT
@circle: Assisted in connecting and provided crucial clues

Respect to their teams for their timely responses. They helped us monitor and block the blacklisted addresses.

[Evil Rabbit Security Inc. @EvilRabbitSec]

#BlackBasta #Ransomware leaked chat logs (I've uploaded to github for visibility and less restrictions).

https://t.co/Pj0XPGenAR

[The Hacker News @TheHackersNews]

Over $1.46 billion worth of cryptocurrency was stolen from Bybit's Ethereum cold wallet in the largest crypto heist to date, reportedly orchestrated by the Lazarus Group.

The attack masked the signing interface, tricking the wallet into transferring funds to an unknown address.

Learn more: https://t.co/zrkMNVr3x0

[Forta 🏰 @FortaNetwork]

The recent @Bybit_Official hack was a tough incident.

Multisig hacks remain a serious threat. Forta Firewall’s upcoming Multisig Module is designed to detect and prevent these kinds of attacks before they happen.

Here’s a sneak peek 👀

[Arkham @arkham]

ALERT: BYBIT HACKER SENDING FUNDS TO MULTIPLE NEW ADDRESSES

[0xor0ne @0xor0ne]

Chrome V8 vulnerability patch analysis and exploitation

https://t.co/Jp2EVGvdY0

#chrome #infosec

[Code Geek @codek_tv]

Web Scraping Cheat sheet

[Cosmos - The Interchain ⚛️ @cosmos]

BUIDL Day @ ETHDenver x @DoraHacks

Buidlers. Explorers. Thinkers. Join us on March 1st ⚛️

Buidl Day comes to Denver to showcase rising projects from Cosmos and beyond! With @babylonlabs_io, @initia, @movementlabsxyz, @SonicLabs, @Aptos.

Register: https://t.co/murthYqiQd